$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: IazFjxEYwyZJ1eSVwQi2OEEztOwRaDGg4wnVOSahQYs= Subject key identifier: 4E:28:14:EB:FF:DA:B7:DC:D3:F2:D5:C3:88:16:C0:E9:73:35:45:26 Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 74AFADFB1AB32D908126AF21AD56B7806CCE6251 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 025E Signing time: Thu 03 Jul 2025 00:53:23 +0000 Manifest this update: Thu 03 Jul 2025 00:48:23 +0000 Manifest next update: Fri 04 Jul 2025 03:50:23 +0000 Files and hashes: 1: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) 2: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: GtlgDaT5wPL42IQQNxKWNEOiOL+dUD4tC0V7T6O8ZZM=) 3: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 4: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 00:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:af:ad:fb:1a:b3:2d:90:81:26:af:21:ad:56:b7:80:6c:ce:62:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Jul 3 00:48:23 2025 GMT Not After : Jul 4 03:50:23 2025 GMT Subject: CN=4E2814EBFFDAB7DCD3F2D5C38816C0E973354526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:2f:31:c7:86:f1:20:45:2f:ba:ac:28:88: 50:a9:d3:32:d7:ac:45:ba:c7:e1:f9:7b:62:7a:d9: e7:90:74:4b:7e:81:20:ba:a4:ef:93:22:09:66:49: 3a:8f:87:90:51:b7:73:b6:3b:86:08:16:95:c2:83: 42:35:d5:c8:08:61:1a:6a:2b:a6:fa:7a:d1:bb:53: 12:0c:27:58:9a:2f:db:0a:21:7e:93:86:d2:79:42: f2:5d:e6:50:fb:71:80:f6:4f:b3:a8:f9:05:ab:b8: dc:50:99:8f:20:f7:ba:a9:70:ff:c1:98:eb:ee:53: b2:c7:a7:68:48:8f:fe:ab:65:5c:0f:32:13:fb:d9: ef:ba:52:ac:33:c6:52:bf:d0:cc:61:0a:e4:ba:8e: c2:9f:cd:42:75:d0:7e:a3:0b:6b:f1:d6:d9:ac:0b: dd:7e:41:b3:6b:de:33:e7:d9:7f:cd:a0:c1:f3:16: aa:b4:60:79:5b:4b:85:30:19:9c:70:f3:4d:0b:26: eb:e7:6c:b8:26:95:7b:5c:f3:9f:51:43:c8:ce:31: 9e:e0:45:33:0c:b0:91:c7:f7:a6:4a:42:5b:31:fd: e5:07:32:0e:6f:f1:cb:36:53:cf:6c:0c:60:f9:7e: 35:86:63:80:32:40:08:fb:6f:f8:77:d3:11:b2:20: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:28:14:EB:FF:DA:B7:DC:D3:F2:D5:C3:88:16:C0:E9:73:35:45:26 X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:13:d5:5d:9b:82:9f:f4:4b:25:da:07:f3:5e:30:07:36:be: dc:32:19:78:4d:53:ce:58:67:88:39:01:ab:46:de:8f:02:d9: f3:27:96:2f:19:d3:89:7e:be:2d:4e:41:e8:ea:18:88:be:16: a5:e5:69:b7:e3:17:a0:23:3d:f7:c2:71:e0:b1:3a:a5:c9:50: e6:41:70:6d:b2:7b:10:ff:7b:38:2c:85:76:7f:18:06:11:e9: f5:64:e2:be:84:9b:20:5b:a9:66:02:b3:32:6f:af:fe:fd:74: d8:e7:66:59:5f:88:73:09:e1:f7:b2:f9:02:e6:da:26:0f:92: 4d:ac:3d:05:a6:b5:87:be:76:6e:85:45:35:f6:f5:15:99:cb: 9f:db:f1:3d:ba:21:22:85:90:69:2f:62:74:d7:d0:1f:6b:f5: 91:9f:5c:08:d3:b1:5b:99:bc:52:38:65:ab:82:86:96:08:39: 2c:2c:54:86:9a:6d:9e:f6:41:05:40:71:10:9d:84:37:ce:9a: 2e:e3:9d:a1:6d:9c:81:de:6e:f2:4c:e6:d6:ba:70:16:09:65: 68:a6:75:6a:d3:dd:17:40:a3:a6:e4:ea:5f:ee:aa:38:b6:38: 82:69:b1:41:30:30:37:ad:1e:30:cf:3f:70:81:28:2b:08:ed: ab:2e:96:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdK+t+xqzLZCBJq8hrVa3gGzOYlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTA3MDMwMDQ4MjNaFw0yNTA3MDQwMzUwMjNaMDMxMTAvBgNV BAMTKDRFMjgxNEVCRkZEQUI3RENEM0YyRDVDMzg4MTZDMEU5NzMzNTQ1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uC8xx4bxIEUvuqwoiFCp0zLX rEW6x+H5e2J62eeQdEt+gSC6pO+TIglmSTqPh5BRt3O2O4YIFpXCg0I11cgIYRpq K6b6etG7UxIMJ1iaL9sKIX6ThtJ5QvJd5lD7cYD2T7Oo+QWruNxQmY8g97qpcP/B mOvuU7LHp2hIj/6rZVwPMhP72e+6UqwzxlK/0MxhCuS6jsKfzUJ10H6jC2vx1tms C91+QbNr3jPn2X/NoMHzFqq0YHlbS4UwGZxw800LJuvnbLgmlXtc859RQ8jOMZ7g RTMMsJHH96ZKQlsx/eUHMg5v8cs2U89sDGD5fjWGY4AyQAj7b/h30xGyID9JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTigU6//at9zT8tXDiBbA6XM1RSYwHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGxPVXZuCn/RLJdoH814wBza+3DIZeE1TzlhniDkBq0bejwLZ8yeWLxnTiX6+ LU5B6OoYiL4WpeVpt+MXoCM998Jx4LE6pclQ5kFwbbJ7EP97OCyFdn8YBhHp9WTi voSbIFupZgKzMm+v/v102OdmWV+Icwnh97L5AubaJg+STaw9Baa1h752boVFNfb1 FZnLn9vxPbohIoWQaS9idNfQH2v1kZ9cCNOxW5m8Ujhlq4KGlgg5LCxUhpptnvZB BUBxEJ2EN86aLuOdoW2cgd5u8kzm1rpwFgllaKZ1atPdF0CjpuTqX+6qOLY4gmmx QTAwN60eMM8/cIEoKwjtqy6Wkg== -----END CERTIFICATE-----Generated at Thu Jul 3 03:05:47 2025 by rpki-client